Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AuSjmBqn9y87h6Gibd5zz3kfXNKWed9dqww769tPU8QU/0/323830343a383161343a3a2f33322d3438203d3e20323732343637.roa
File:                     323830343a383161343a3a2f33322d3438203d3e20323732343637.roa (raw, json)
Hash identifier:          2ZzL7YFrBe9MEyDHF5XNOaZ1lPCC3Lh9AJhnn7Y7/7E=
Subject key identifier:   34:35:83:CA:C5:F6:AC:CC:83:34:0F:9F:FD:95:37:29:01:F8:37:88
Certificate issuer:       /CN=958CA8ED84492718A0B4CD9C04DA11CD173E4B17
Certificate serial:       65072E7A11A869CDFD2761D5A746BE6EC8EA0B0A
Authority key identifier: 95:8C:A8:ED:84:49:27:18:A0:B4:CD:9C:04:DA:11:CD:17:3E:4B:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/958CA8ED84492718A0B4CD9C04DA11CD173E4B17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AuSjmBqn9y87h6Gibd5zz3kfXNKWed9dqww769tPU8QU/0/323830343a383161343a3a2f33322d3438203d3e20323732343637.roa
Signing time:             Thu 15 Feb 2024 16:54:19 +0000
ROA not before:           Thu 15 Feb 2024 16:49:19 +0000
ROA not after:            Thu 13 Feb 2025 16:54:19 +0000
asID:                     272467
IP address blocks:        2804:81a4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:07:2e:7a:11:a8:69:cd:fd:27:61:d5:a7:46:be:6e:c8:ea:0b:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=958CA8ED84492718A0B4CD9C04DA11CD173E4B17
        Validity
            Not Before: Feb 15 16:49:19 2024 GMT
            Not After : Feb 13 16:54:19 2025 GMT
        Subject: CN=343583CAC5F6ACCC83340F9FFD95372901F83788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9c:80:ef:7f:25:f7:78:c1:39:74:a5:44:b4:
                    b9:c1:59:65:b6:36:8e:b7:97:aa:27:eb:dc:7f:38:
                    35:8a:04:84:29:07:1d:36:00:07:99:79:7b:5d:e8:
                    e1:91:90:b4:96:dd:61:1d:80:25:9b:69:61:eb:cc:
                    c7:22:58:54:8f:54:54:45:c0:c3:39:58:50:c0:dd:
                    c9:3b:54:2f:ec:c7:fd:b1:c7:17:2e:ea:32:0a:86:
                    d5:83:1e:fc:87:f4:c9:de:b7:15:2f:bc:48:72:94:
                    f1:1e:4e:10:ca:69:e2:46:92:a4:70:70:27:14:3f:
                    09:eb:1e:ec:36:8c:7c:aa:69:75:5f:91:cd:55:bc:
                    cd:50:ed:f4:a6:be:e1:22:e9:15:b0:1d:b2:c9:95:
                    5a:7f:7d:0c:4c:70:db:e6:ec:bd:ba:aa:bc:de:c3:
                    47:1f:50:87:bc:28:e8:6c:5f:45:a3:3b:e7:ac:e8:
                    0b:de:82:8d:86:aa:c0:ef:19:66:37:f9:ed:94:53:
                    b2:9f:e8:01:91:c1:2f:d5:c8:bc:67:1b:89:a3:3c:
                    8e:7d:55:58:fa:5b:7b:80:a0:8f:01:90:2c:17:d0:
                    8d:24:a7:7f:18:9e:d3:65:1f:e6:b0:46:1f:8e:95:
                    c2:aa:18:7e:cc:d0:f6:18:44:0c:ad:62:85:ef:fd:
                    3c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:35:83:CA:C5:F6:AC:CC:83:34:0F:9F:FD:95:37:29:01:F8:37:88
            X509v3 Authority Key Identifier:
                keyid:95:8C:A8:ED:84:49:27:18:A0:B4:CD:9C:04:DA:11:CD:17:3E:4B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AuSjmBqn9y87h6Gibd5zz3kfXNKWed9dqww769tPU8QU/0/958CA8ED84492718A0B4CD9C04DA11CD173E4B17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/958CA8ED84492718A0B4CD9C04DA11CD173E4B17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AuSjmBqn9y87h6Gibd5zz3kfXNKWed9dqww769tPU8QU/0/323830343a383161343a3a2f33322d3438203d3e20323732343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:81a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:9e:b4:71:90:42:4d:8e:ab:f4:17:b5:4e:7b:ba:90:11:7d:
         0a:63:d6:e5:8b:ac:70:17:8d:cb:3f:0e:7a:16:0e:e5:ba:b1:
         9c:13:5e:cf:3d:4a:2e:d7:9d:97:48:1a:fa:f4:03:de:d7:5d:
         f5:d6:3e:e1:41:1a:dd:95:08:1d:c4:8b:68:4d:9f:eb:a6:af:
         5d:2e:f7:e8:09:6a:81:ad:a5:5e:20:d4:dc:be:20:71:2d:94:
         2d:a0:39:53:d7:18:3c:98:40:bb:f9:05:da:ea:7c:ac:62:f1:
         b5:77:8e:0a:b5:b0:ef:ca:82:5f:15:ea:11:0d:16:11:ef:25:
         6d:41:75:93:49:ee:52:4d:72:3b:05:cb:5d:fe:12:06:f3:2a:
         9c:04:5b:15:53:19:35:24:c5:3a:d5:43:e2:cf:aa:27:93:c6:
         8a:7d:30:de:25:3d:99:c5:3b:ce:5c:2b:b1:51:ea:49:8a:be:
         4b:e5:9f:cc:7c:e9:57:20:df:17:9c:8f:ad:b8:49:e3:6e:d6:
         8b:8b:62:3a:84:01:b3:4d:22:df:1a:cd:92:ed:2b:5b:85:7a:
         cb:22:60:81:cb:7c:ef:49:6e:04:d4:6e:bb:ae:7e:ef:b6:6e:
         57:51:6c:5f:14:2a:b1:11:ec:70:9d:ed:ce:dc:7b:64:21:73:
         5e:7e:bd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----